af71e5fdd6e9597793de4c6704e4a26c849522edcbc2f73c55dc0699a01f4c66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af71e5fdd6e9597793de4c6704e4a26c849522edcbc2f73c55dc0699a01f4c66
Size

67KB
MD5

2312cffc399bea11f30b255d1a9b3cae
SHA1

c8d9b1343de12f2a7f91f224efc80e1afb2ed164
SHA256

af71e5fdd6e9597793de4c6704e4a26c849522edcbc2f73c55dc0699a01f4c66
SHA512

fd6179b0fe3f433774a1280236aa7a27f757442870909555866a73da6829c6e2180bf9ce322c135734d8cfe57b54fcf747cbc18d0cad5bdb751039669d136181
SSDEEP

768:2QAfJqnCym0gS8IJtRaeX0vKa3a+vImEzsclcJKf08EcAiG+5/ITossZmNwtXsFa:qJIC50gS8Oscl2Kf1GToCw2ypkW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af71e5fdd6e9597793de4c6704e4a26c849522edcbc2f73c55dc0699a01f4c66

Files

af71e5fdd6e9597793de4c6704e4a26c849522edcbc2f73c55dc0699a01f4c66
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/Users/customer/GitLab/cube_games/Library/Bee/artifacts/500b0aP.dag/ParticleImage.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ